$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e322e302f32342d3234203d3e203633353535.roa File: 3232332e302e322e302f32342d3234203d3e203633353535.roa (raw, json) Hash identifier: pb4tXpqa2FNIUreVfYWddTHkrnyVVOntRJw8ti3zGeA= Subject key identifier: 04:6F:AB:C4:4C:07:22:1C:CE:6C:35:66:3D:E0:67:1A:74:32:CE:66 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 0AC5D29840E6094E1301FB41857AA3D298A79AA8 Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e322e302f32342d3234203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:14:44 +0000 ROA not before: Mon 15 Jun 2026 05:09:44 +0000 ROA not after: Mon 14 Jun 2027 05:14:44 +0000 asID: 63555 IP address blocks: 223.0.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c5:d2:98:40:e6:09:4e:13:01:fb:41:85:7a:a3:d2:98:a7:9a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:09:44 2026 GMT Not After : Jun 14 05:14:44 2027 GMT Subject: CN=046FABC44C07221CCE6C35663DE0671A7432CE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:e5:80:ae:29:12:cb:d7:ad:cc:82:d9:d8: 29:06:71:46:bc:dc:d4:af:dc:db:8b:1d:cc:e5:df: f8:52:6b:ce:50:56:d7:81:73:57:09:5e:db:01:8a: 6d:08:f9:bf:12:3c:f8:13:84:06:a0:7e:2f:64:d0: 65:8d:16:0b:86:24:7d:00:b9:bd:f5:b3:e8:20:73: 91:b3:08:35:42:c2:19:89:97:46:d9:ba:3c:03:11: 9a:ac:62:70:be:69:a4:68:12:ce:5f:eb:4d:ca:aa: ee:1f:04:47:88:91:81:4a:66:e2:1c:62:ea:4c:d7: b7:09:7c:e9:fb:12:b0:fd:82:ed:da:78:7b:f6:81: 7f:21:e9:69:4d:36:0f:d6:af:47:61:a2:58:c8:c4: 55:16:fd:5d:5b:f3:0d:72:cc:57:a1:96:d3:70:d9: 40:8a:bb:0a:91:c4:80:f4:61:48:56:8e:8c:4c:32: 37:98:de:c3:cf:0b:42:63:08:83:30:9e:d8:40:ff: fa:77:a4:c6:c1:06:5b:0e:aa:bf:03:28:41:47:7e: e7:41:d5:67:6e:46:33:6c:84:82:30:07:83:41:e2: 2e:b1:dc:a3:ed:d4:bc:2d:4d:b2:cc:6d:39:b7:15: 88:e2:14:21:49:8f:d9:27:f3:61:a1:de:05:74:5d: 44:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6F:AB:C4:4C:07:22:1C:CE:6C:35:66:3D:E0:67:1A:74:32:CE:66 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e322e302f32342d3234203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.2.0/24 Signature Algorithm: sha256WithRSAEncryption 86:a5:81:08:2c:5f:bc:80:56:48:22:1b:c8:a7:99:6f:50:bc: 7c:ed:eb:aa:f7:6e:55:43:37:66:c3:63:a8:43:ed:6d:85:d5: 74:b7:0b:ff:19:e2:90:ca:7d:1c:62:5e:20:9a:80:85:bc:51: 16:b3:b4:e5:92:1d:ff:0c:de:f3:fc:7b:c5:26:a5:a2:51:e9: 27:30:e8:f8:b4:01:db:85:ac:62:e4:c6:07:40:55:b0:3b:46: d1:d4:c0:a4:11:6b:b9:62:01:23:a2:19:86:9b:c7:88:28:e4: 4e:86:21:d6:48:d1:e8:ad:c3:00:d5:10:dc:7f:a9:e3:46:69: 30:a9:e7:8b:5a:d4:f2:17:af:f5:23:27:32:a2:0a:d6:67:04: 4d:4b:a2:3e:5a:42:99:97:14:de:d9:bb:75:15:cf:75:ff:5a: 31:bd:b2:8d:58:db:85:64:10:41:17:cf:8a:f9:cc:b5:3d:de: e0:48:64:42:4a:5b:18:75:91:f7:0f:5a:25:f1:f9:61:65:3e: f8:47:77:d4:62:db:27:7f:e4:eb:a0:02:50:6f:7e:ce:6f:de: 78:56:bd:d3:0b:ff:5c:11:ce:c9:7c:24:39:3b:e0:c6:43:03: 1a:e4:30:c3:6e:b8:9a:fd:44:81:28:7d:60:32:8c:18:ca:8c: ba:2e:7f:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUCsXSmEDmCU4TAftBhXqj0pinmqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTA5NDRaFw0yNzA2MTQwNTE0NDRaMDMxMTAvBgNV BAMTKDA0NkZBQkM0NEMwNzIyMUNDRTZDMzU2NjNERTA2NzFBNzQzMkNFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRu+WArikSy9etzILZ2CkGcUa8 3NSv3NuLHczl3/hSa85QVteBc1cJXtsBim0I+b8SPPgThAagfi9k0GWNFguGJH0A ub31s+ggc5GzCDVCwhmJl0bZujwDEZqsYnC+aaRoEs5f603Kqu4fBEeIkYFKZuIc YupM17cJfOn7ErD9gu3aeHv2gX8h6WlNNg/Wr0dholjIxFUW/V1b8w1yzFehltNw 2UCKuwqRxID0YUhWjoxMMjeY3sPPC0JjCIMwnthA//p3pMbBBlsOqr8DKEFHfudB 1WduRjNshIIwB4NB4i6x3KPt1LwtTbLMbTm3FYjiFCFJj9kn82Gh3gV0XUQjAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUBG+rxEwHIhzObDVmPeBnGnQyzmYwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzUzNTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 3wACMA0GCSqGSIb3DQEBCwUAA4IBAQCGpYEILF+8gFZIIhvIp5lvULx87euq925V Qzdmw2OoQ+1thdV0twv/GeKQyn0cYl4gmoCFvFEWs7Tlkh3/DN7z/HvFJqWiUekn MOj4tAHbhaxi5MYHQFWwO0bR1MCkEWu5YgEjohmGm8eIKOROhiHWSNHorcMA1RDc f6njRmkwqeeLWtTyF6/1IycyogrWZwRNS6I+WkKZlxTe2bt1Fc91/1oxvbKNWNuF ZBBBF8+K+cy1Pd7gSGRCSlsYdZH3D1ol8flhZT74R3fUYtsnf+TroAJQb37Ob954 Vr3TC/9cEc7JfCQ5O+DGQwMa5DDDbria/USBKH1gMowYyoy6Ln9g -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:20 2026 by rpki-client